Director Security Engineer | DevSecOps

p strong Your wellbeing, our mission. Join a company shaping a healthier world. /strong /p p strong GET TO KNOW US /strong /p p At Wellhub we're revolutionizing workplace wellness. Our platform connects employees worldwide to the best partners for fitness, mindfulness, therapy, nutrition, and sleep—all in one simple subscription. Headquartered in NYC with team members in Europe, North America and South America, we’re on a mission to make every company a wellness company. /p p We believe work should be fulfilling, inspiring, and balanced. Here, you’ll find a team that values wellbeing, collaboration, and different perspectives, where passion and creativity push boundaries to create real impact. Your contributions will help shape a healthier, more balanced world for you and millions of people globally. nbsp; /p p strong Join us in redefining the future of wellbeing! /strong /p p nbsp; /p p strong THE OPPORTUNITY /strong /p p We are hiring a strong Director Security Engineer /strong nbsp;to our strong Information Security /strong team in strong Brazil /strong ! This is a strong Remote – Brazil /strong position, meaning you can work from anywhere within the country. Please note that this role is only open to candidates in Brazil. nbsp; /p p The Information Security team is responsible to protect our subscription-based product serving millions of users. As Director Security Engineer, you will be the technical leader driving application security, DevSecOps practices, and security engineering across our 10 product verticals. This is a unique opportunity to build security capabilities in a high-growth environment. You will help construct the technical security strategy, architect security solutions, lead threat modeling, and establish secure development practices across all engineering teams. The role requires deep technical expertise in application security, cloud security, and modern DevSecOps practices.In this capacity, you will serve as the primary architect for our security engineering roadmap, ensuring that protection is integrated at every stage. You will oversee the deployment of automated security tooling, mentor senior engineers in advanced vulnerability research, and partner with product leaders to balance rapid feature delivery with robust risk mitigation. Your leadership will be pivotal in scaling our security posture to meet the demands of a global, multi-vertical ecosystem while fostering a culture of shared security responsibility. /p p span style= color: rgb(224, 62, 45); strong nbsp; /strong /span /p p strong YOUR IMPACT /strong /p ul li Lead the technical security strategy for product and application security, defining architecture standards, security baselines, and secure coding guidelines aligned with OWASP ASVS, NIST SSDF, and BSIMM frameworks. /li li Architect and implement a comprehensive DevSecOps pipeline, integrating SAST, DAST, SCA, and container scanning across all CI/CD pipelines serving 10 product verticals. /li li Drive threat modeling practices across critical product flows, partnering with engineering leads to identify and mitigate security risks before they reach production. /li li Design and implement a centralized security telemetry architecture, connecting application logs, WAF events, and fraud signals into a unified SIEM platform for real-time detection. /li li Lead the technical evaluation, selection, and implementation of security tools (SAST/DAST, SIEM/SOAR, PAM, API Gateway security, container security scanners). /li li Establish and mentor a team of 7-8 embedded DevSecOps engineers across product verticals, providing technical guidance and ensuring consistent security standards. /li li Own the technical roadmap for reducing MTTD from gt;48h to lt;1h and fraud detection from D+1 to real-time through security engineering and automation. /li li Live the mission: inspire and empower others by genuinely caring for your own wellbeing and your colleagues. Bring wellbeing to the forefront of wo